1.2 Skills Outline and Domain Weights

Key Takeaways

  • The current skills outline is dated April 24, 2026 and divides DP-300 into five weighted domains
  • Three domains - Implement a secure environment; Monitor, configure, and optimize database resources; and Plan and configure an HA/DR environment - each carry 20-25% and together can account for up to roughly three quarters of the exam
  • Plan and implement data platform resources (15-20%) and Configure and manage automation of tasks (15-20%) are the two smallest domains
  • The April 24, 2026 change log was minor: objective-level tweaks within Configure database authentication and authorization and within Automate deployment of database resources, with no domain-level restructuring
  • Always verify the skills measured as of date on the Microsoft Learn study guide - studying from a pre-2026 outline risks preparing for retired objectives
Last updated: August 2026

1.2 Skills Outline and Domain Weights

Quick Answer: The current DP-300 skills outline (skills measured as of April 24, 2026) has five domains: Plan and implement data platform resources (15-20%), Implement a secure environment (20-25%), Monitor, configure, and optimize database resources (20-25%), Configure and manage automation of tasks (15-20%), and Plan and configure a high availability and disaster recovery (HA/DR) environment (20-25%). The most recent change log was minor, touching only a few objectives under authentication/authorization and deployment automation.

The Five Domains at a Glance

DomainWeightRough question share of a 50-question form
Plan and implement data platform resources15-20%~8-10 questions
Implement a secure environment20-25%~10-13 questions
Monitor, configure, and optimize database resources20-25%~10-13 questions
Configure and manage automation of tasks15-20%~8-10 questions
Plan and configure an HA/DR environment20-25%~10-13 questions

Weights are ranges, not guarantees, and Microsoft does not promise an exact per-domain question count on any single form. Still, the structure is decisive: the three 20-25% domains - security, optimization, and HA/DR - can jointly account for up to about 75% of your exam. A study plan that gives equal time to all five domains is mis-weighted; give the heavy three roughly a quarter more attention each than the two lighter domains.

Domain 1: Plan and Implement Data Platform Resources (15-20%)

This domain covers choosing, deploying, sizing, and migrating database platforms. Its three functional groups:

  • Plan and deploy Azure SQL solutions - recommending a database offering for specific requirements, choosing an automated deployment method, identifying use cases for Azure Arc-enabled SQL services and Azure SQL Database in Microsoft Fabric, planning table partitioning, recommending sharding, deploying offerings on selected platforms, deploying hybrid SQL Server solutions, and applying patches and updates for hybrid and infrastructure as a service (IaaS) deployments.
  • Configure resources for scale and performance - configuring Azure SQL Database, Azure SQL Managed Instance, and SQL Server on Azure Virtual Machines for scale and performance, plus table partitioning and data compression.
  • Plan and implement a migration strategy - evaluating migration requirements, choosing offline versus online strategies, implementing migrations to Azure and between Azure SQL services, using Azure SQL Managed Instance database copy and move, and troubleshooting migrations.

The classic trap in this domain is offering selection: knowing when the answer is Azure SQL Database versus SQL Managed Instance versus SQL Server on an Azure VM, based on feature compatibility, lift-and-shift effort, and control requirements.

Domain 2: Implement a Secure Environment (20-25%)

A heavy domain with three functional groups:

  • Configure database authentication and authorization - Microsoft Entra ID authentication across Azure SQL Database, SQL Managed Instance, and SQL Server; authentication for SQL on Azure VMs; security principals; creating users from Microsoft Entra identities; database- and object-level permissions; least privilege; troubleshooting; and managing all of it with T-SQL.
  • Implement security for data at rest and data in transit - transparent data encryption (TDE), object-level encryption, server- and database-level firewall rules, Always Encrypted including VBS enclaves, and private links and service endpoints.
  • Implement compliance controls for sensitive data - data classification, server and database auditing, change data tracking, dynamic data masking, ledger in Azure SQL, and row-level security.

Note the deliberate split: network protection (firewall rules, private link) sits in the data-in-transit group, while masking, classification, auditing, and ledger sit in the compliance group. The exam exploits that boundary - a question about who can see unmasked card numbers is a dynamic data masking question, not a firewall question.

Domain 3: Monitor, Configure, and Optimize Database Resources (20-25%)

The deepest hands-on domain, again with three functional groups:

  • Monitor resource activity and performance - building an operational baseline, finding and interpreting performance metrics, configuring monitoring, database watcher, and Extended Events.
  • Monitor and optimize query performance - configuring and monitoring with Query Store, resolving session blocking, using dynamic management views (DMVs), implementing index changes, recommending query construct modifications, reviewing execution plans, and Intelligent Insights.
  • Configure database solutions for optimal performance - index and statistics maintenance, integrity checks, automatic tuning, server settings, Resource Governor, database-scoped configuration, compute and storage scaling, and intelligent query processing (IQP) features.

This is where product experience pays most. You should be able to look at a blocking-chain or regressed-query scenario and name the tool - Query Store, DMVs, or Extended Events - that surfaces it fastest.

Domain 4: Configure and Manage Automation of Tasks (15-20%)

The smallest domain alongside Domain 1, with three functional groups:

  • Create and manage SQL Server Agent jobs - schedules for regular maintenance, job alerts and notifications, and troubleshooting Agent jobs.
  • Automate deployment of database resources - Azure Resource Manager (ARM) and Bicep templates, Azure PowerShell, the Azure CLI, and monitoring and troubleshooting deployments.
  • Create and manage database tasks in Azure - elastic jobs, database tasks through automation, alerts and notifications on those tasks, and troubleshooting.

A recurring exam theme is picking the right scheduler: SQL Server Agent is unavailable in Azure SQL Database (single databases), so elastic jobs are the answer there, while SQL Managed Instance and SQL Server on VMs support Agent directly.

Domain 5: Plan and Configure a High Availability and Disaster Recovery (HA/DR) Environment (20-25%)

Three functional groups:

  • Plan an HA/DR strategy - recommending a strategy from Recovery Point Objective (RPO) and Recovery Time Objective (RTO) requirements, evaluating hybrid deployments and Azure-specific solutions, and planning HA/DR testing.
  • Plan and perform backup and restore - recommending backup and restore strategies, native backup and restore, point-in-time restore, long-term backup retention, T-SQL backup and restore, and backup to and restore from cloud storage.
  • Configure HA/DR - active geo-replication, Always On availability groups on SQL Managed Instance and Azure VMs, failover groups, Always On Failover Cluster Instances on Azure VMs, log shipping, and monitoring and troubleshooting HA/DR solutions.

Almost every question in this domain reduces to RPO/RTO arithmetic: how much data can the business lose, and how fast must it be back? Map each technology - geo-replication, failover groups, availability groups, log shipping, restore-based recovery - to the RPO/RTO it can realistically deliver.

The April 24, 2026 Change Log: Minor, but Check the Date

Microsoft maintains a change log on the study guide comparing the current outline to the previous one. For the April 24, 2026 revision, the domain-level headings for Implement a secure environment and Configure and manage automation of tasks are marked No change, and exactly two functional groups are marked Minor: Configure database authentication and authorization and Automate deployment of database resources. In other words, this refresh adjusted individual objectives inside security and automation rather than restructuring the exam - no domains were added, removed, or re-weighted.

Minor does not mean ignorable. Objective-level tweaks are precisely where new exam questions come from, so read the current bullets in those two functional groups even if you studied an older edition of a book or course.

Why You Must Not Study From a Pre-2026 Outline

DP-300 has been re-weighted multiple times since launch - older materials show different percentage splits (some even swap the weights of Domains 1 and 2) and reference retired features or outdated terminology such as older branding for Microsoft Entra ID. Before trusting any book, course, video series, or question bank, check two dates: the skills measured as of date at the top of the official Microsoft Learn study guide, and the publication date of the material. Anything written against an outline older than the current date needs to be reconciled against the live outline. Also note that Microsoft updates the English exam first; localized versions typically lag by about eight weeks, which matters if you plan to test in another language.

Test Your Knowledge

Which functional group belongs to the Implement a secure environment domain of the current DP-300 outline?

A
B
C
D
Test Your Knowledge

How is the April 24, 2026 revision of the DP-300 skills outline best characterized?

A
B
C
D